37378 matches found
Malicious code in semantic-release-janus-pyxis-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122706
Malicious code in release-it-apollo-cypress-oberon npm...
EUVD-2025-111739
Malicious code in library-eleventy-start-semantic-release npm...
EUVD-2025-112535
Malicious code in indus-standard-semantic-release-prompts npm...
EUVD-2025-111120
Malicious code in mini-css-extract-plugin-semantic-release-rimraf-hermes npm...
MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148239 Malicious code in sqlite-semantic-release-chariklo-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a70877cf6fc7144944e3d17633b64feec401c7798f2edb05735691b1437526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139785 Malicious code in avior-semantic-release-prettier-cz-conventional-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1bee846b0039c60e0e0057b6c29b031b648b21ebbe632243dafe96452cfc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143456 Malicious code in hydra-semantic-release-flare-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113849
Malicious code in europa-config-semantic-release-aquarius npm...
EUVD-2025-113128
Malicious code in got-release-it-nodemon-callisto npm...
EUVD-2025-112563
Malicious code in impulse-pino-eridanus-release-it npm...
EUVD-2025-122682
Malicious code in release-it-xo-quantum-bellatrix npm...
Malicious code in semantic-release-inquirer-nestjs-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf324a28088a6961749e1576aaf323a6257739fb24de793a90086859618f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...